<div dir="ltr"><div>Yes the times on the ipa server and ipa client are in sync with our NTP source</div><div> </div><div>Thanks</div><div>Charlie</div></div><div class="gmail_extra"><br><br><div class="gmail_quote">On Sat, Feb 9, 2013 at 1:07 AM, Dmitri Pal <span dir="ltr"><<a href="mailto:dpal@redhat.com" target="_blank">dpal@redhat.com</a>></span> wrote:<br>

<blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">
  
    
  
  <div text="#000000" bgcolor="#FFFFFF"><div><div class="h5">
    On 02/08/2013 07:47 PM, Charlie Derwent wrote:
    <blockquote type="cite">
      <div dir="ltr">
        <div>Hi </div>
        <div> </div>
        <div>Whenever I attempt an unattended installation with a
          principal and password. The installation fails.</div>
        <div> </div>
        <div>I'm using the following syntax for my command</div>
        <div> </div>
        <div>ipa-client-install --domain=<a href="http://example.com" target="_blank">example.com</a> --server=<a href="http://ipa.example.com" target="_blank">ipa.example.com</a>
          --realm=<a href="http://EXAMPLE.COM" target="_blank">EXAMPLE.COM</a>
          --principal=user --password=pass -U
          --ntp-server=123.123.123.123 --mkhomedir --hostname=<a href="http://server1.example.com" target="_blank">server1.example.com</a></div>
        <div> </div>
        <div>The error I get varies between (in order of frequency)</div>
        <div> </div>
        <div>Joining realm failed: /usr/sbin/ipa-join: symbol lookup
          error: /usr/sbin/ipa-join: undefined symbol:
          xmlrpc_server_info_set_user</div>
        <div> </div>
        <div>and</div>
        <div> </div>
        <div>
          <div>kinit(v5): Password incorrect while getting initial
            credentials</div>
          <div> </div>
        </div>
        <div>and</div>
        <div> </div>
        <div>
          <div>Password expired. you must change it now.</div>
          <div>
            kinit(v5): Cannot read password while getting initial
            credentials</div>
        </div>
        <div>
          <div> </div>
          <div>The password is 100% right as I can kinit on other
            servers and access the webgui with the same details.</div>
          <div> </div>
          <div>
            OTP's work flawlessly.</div>
          <div> </div>
        </div>
        <div>ipa-client = tried with 2.1.3-1.el5 and 2.1.3-5.el5_9.2
          (RHEL 5.8)</div>
        <div> </div>
        <div>ipa-server = 2.2.0-16.el6  (RHEL 6.3)</div>
      </div>
    </blockquote>
    <br></div></div>
    I assume this happens on the newly installed system...<br>
    Is the time on the system correct?<br>
    <br>
    <blockquote type="cite">
      <div dir="ltr">
        <div> </div>
        <div>Thanks,</div>
        <div>
          Charlie</div>
      </div>
      <br>
      <fieldset></fieldset>
      <br>
      <pre>_______________________________________________
Freeipa-users mailing list
<a href="mailto:Freeipa-users@redhat.com" target="_blank">Freeipa-users@redhat.com</a>
<a href="https://www.redhat.com/mailman/listinfo/freeipa-users" target="_blank">https://www.redhat.com/mailman/listinfo/freeipa-users</a></pre><span class="HOEnZb"><font color="#888888">
    </font></span></blockquote><span class="HOEnZb"><font color="#888888">
    <br>
    <br>
    <pre cols="72">-- 
Thank you,
Dmitri Pal

Sr. Engineering Manager for IdM portfolio
Red Hat Inc.


-------------------------------
Looking to carve out IT costs?
<a href="http://www.redhat.com/carveoutcosts/" target="_blank">www.redhat.com/carveoutcosts/</a>


</pre>
  </font></span></div>

<br>_______________________________________________<br>
Freeipa-users mailing list<br>
<a href="mailto:Freeipa-users@redhat.com">Freeipa-users@redhat.com</a><br>
<a href="https://www.redhat.com/mailman/listinfo/freeipa-users" target="_blank">https://www.redhat.com/mailman/listinfo/freeipa-users</a><br></blockquote></div><br></div>